Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6DCIGYLpc_4mwjLUOW_998cXf64.roa
File:                     6DCIGYLpc_4mwjLUOW_998cXf64.roa (raw, json)
Hash identifier:          HEE9mTj6Im+JFUiWs7C0DkjHJ1Bywy7pFZTypNTQEGc=
Subject key identifier:   E8:30:88:19:82:E9:73:FE:26:C2:32:D4:39:6F:FD:F7:C7:17:7F:AE
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018454D0CCF12F1AA30E5C61E8D9712873A4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6DCIGYLpc_4mwjLUOW_998cXf64.roa
Signing time:             Tue 08 Nov 2022 01:18:00 +0000
ROA not before:           Tue 08 Nov 2022 01:18:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203453
IP address blocks:        2a06:a005:150d::/48 maxlen: 48
                          2a05:dfc7:2300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:54:d0:cc:f1:2f:1a:a3:0e:5c:61:e8:d9:71:28:73:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  8 01:18:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e830881982e973fe26c232d4396ffdf7c7177fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:2e:bf:00:97:03:b3:27:07:88:49:f7:6c:
                    61:d0:6d:c6:ae:93:c8:6d:8a:85:a4:e2:aa:af:e7:
                    ca:47:76:d0:9a:f1:28:43:22:7b:27:3a:65:7c:5d:
                    ed:16:0d:bd:d4:f5:7f:13:51:93:f5:d4:0c:8b:9a:
                    47:8f:6d:fb:8b:67:c0:91:c8:50:de:2f:81:93:76:
                    85:a6:c6:89:23:b5:05:a9:44:b6:a6:20:ae:94:bf:
                    6b:67:5b:eb:9d:f0:be:f5:0b:f7:02:99:15:b4:51:
                    75:10:49:c9:b8:5c:bf:cf:f2:a7:56:cc:4e:d8:02:
                    2c:a5:b8:74:85:f2:15:b5:8b:03:71:2f:19:1e:86:
                    71:dd:f0:e6:f9:d2:f0:2d:35:e8:53:33:a8:12:15:
                    f1:28:e7:07:24:ea:0d:5b:00:3d:08:b4:01:7a:a0:
                    db:ac:d8:1c:23:c0:78:5b:7b:8e:25:72:1d:c7:cd:
                    4e:54:a2:f5:37:a8:cc:eb:25:46:37:ab:12:3b:07:
                    05:37:13:ed:04:fb:4e:db:86:f8:17:ab:44:53:6c:
                    5c:1c:69:49:be:79:22:87:5e:cf:49:c2:b1:8c:45:
                    81:dc:f0:ce:c5:dd:ac:b5:e2:bd:c0:13:a9:2b:07:
                    2f:d4:6d:ff:c7:52:ac:84:6a:50:4f:da:e0:87:d7:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:30:88:19:82:E9:73:FE:26:C2:32:D4:39:6F:FD:F7:C7:17:7F:AE
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6DCIGYLpc_4mwjLUOW_998cXf64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2300::/40
                  2a06:a005:150d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:8b:74:1b:1c:35:61:e4:8d:3b:06:13:a4:7b:ed:e9:3d:
         57:3c:fe:e4:5f:a2:c4:33:0d:b2:a9:9c:d0:16:ed:dc:2c:24:
         bb:5e:05:44:96:8e:d1:83:cc:ea:a8:2b:15:1d:4d:88:9a:30:
         14:86:9e:5f:ec:d1:f2:a9:7c:2f:4d:83:04:95:c9:1b:96:7c:
         7c:79:a7:3a:82:99:98:6f:0b:1e:be:eb:2e:46:7d:9a:16:ed:
         25:09:13:62:4b:27:da:68:dc:80:c7:09:18:54:13:61:c8:f6:
         e4:7b:d1:d9:3c:9f:cc:d7:f5:69:d8:cb:52:29:43:da:1f:3c:
         65:a3:75:58:e6:a3:75:24:db:7e:d8:95:b0:81:2a:48:36:82:
         d2:0d:85:89:b0:42:e3:14:41:35:2e:87:ac:e6:cf:28:d3:2f:
         54:85:4c:7c:01:bc:6d:bd:03:7f:cb:54:85:6d:ba:f1:ae:36:
         e4:f6:89:79:f1:2e:d8:de:16:ad:d1:15:a8:4b:0e:14:4d:0a:
         f9:2c:1e:3f:b6:69:62:1e:3a:82:ea:a4:5d:98:80:79:23:da:
         06:9a:79:cb:b5:a5:36:8f:57:7a:41:fd:93:ea:c4:a1:4d:ce:
         a7:af:af:d9:45:25:32:87:b7:35:56:4c:e7:98:53:45:04:65:
         01:fc:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----